Description:

X server frozes, system not response on any keyboard press expect SysReq.

System can be reached over ssh.

X server goes to D-state, and can't be killed

Additional info:
* package version(s)
kernel26 2.6.36-1
xorg-server 1.9.0.901-2
ati-dri 7.9-1
xf86-video-ati 6.13.2-2
HW:
* mb: p5k asus
* video: radeon hd3870

* config and/or log files etc.
Sys sysreq state of process
Oct 28 22:26:22 localhost kernel: [<c109ae84>] ? move_native_irq+0x14/0x50
Oct 28 22:26:22 localhost kernel: [<c12fb139>] schedule_timeout+0x129/0x2b0
Oct 28 22:26:22 localhost kernel: [<c12fc00b>] ? __mutex_lock_slowpath+0x1eb/0x2b0
Oct 28 22:26:22 localhost kernel: [<c1051b90>] ? process_timeout+0x0/0x10
Oct 28 22:26:22 localhost kernel: [<f8eaff0a>] radeon_fence_wait+0x15a/0x290 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8f06624>] ? set_vtx_resource+0x284/0x430 [radeon]
Oct 28 22:26:22 localhost kernel: [<c1060b00>] ? autoremove_wake_function+0x0/0x40
Oct 28 22:26:22 localhost kernel: [<f8eb07dc>] radeon_sync_obj_wait+0xc/0x10 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8d7ce46>] ttm_bo_wait+0xd6/0x170 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8d7fb41>] ttm_bo_move_accel_cleanup+0x81/0x2d0 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8eb0a6d>] radeon_move_blit.clone.1+0x13d/0x1b0 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8eb0b7e>] radeon_bo_move+0x9e/0x3a0 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8eb05cc>] ? radeon_ttm_backend_bind+0x2c/0xa0 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8d7c76f>] ? ttm_tt_populate+0x6f/0x90 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8d7c7e4>] ? ttm_tt_bind+0x54/0x80 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8d7d1ef>] ttm_bo_handle_move_mem+0xef/0x310 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8eb0ae0>] ? radeon_bo_move+0x0/0x3a0 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8d7e5e3>] ttm_mem_evict_first+0x253/0x4a0 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8c1ca74>] ? drm_mm_kmalloc+0x24/0x180 [drm]
Oct 28 22:26:22 localhost kernel: [<c1167eb5>] ? security_capable+0x25/0x30
Oct 28 22:26:22 localhost kernel: [<f8d7efae>] ttm_bo_mem_space+0x36e/0x420 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8d7d23b>] ? ttm_bo_handle_move_mem+0x13b/0x310 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8d7f115>] ttm_bo_move_buffer+0xb5/0x130 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8c1ca74>] ? drm_mm_kmalloc+0x24/0x180 [drm]
Oct 28 22:26:22 localhost kernel: [<c1167eb5>] ? security_capable+0x25/0x30
Oct 28 22:26:22 localhost kernel: [<f8d7f22e>] ttm_bo_validate+0x9e/0x130 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8d7f5be>] ttm_bo_init+0x22e/0x2b0 [ttm]
Oct 28 22:26:22 localhost kernel: [<f8eb177c>] radeon_bo_create+0x10c/0x240 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8eb1540>] ? radeon_ttm_bo_destroy+0x0/0xa0 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8ec54b1>] radeon_gem_object_create+0x71/0x100 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8ec58f2>] radeon_gem_create_ioctl+0x62/0xd0 [radeon]
Oct 28 22:26:22 localhost kernel: [<f8c13231>] drm_ioctl+0x1e1/0x470 [drm]
Oct 28 22:26:22 localhost kernel: [<f8ec5890>] ? radeon_gem_create_ioctl+0x0/0xd0 [radeon]
Oct 28 22:26:22 localhost kernel: [<c10fd25c>] ? do_sync_read+0x9c/0xd0
Oct 28 22:26:22 localhost kernel: [<c1064d86>] ? __hrtimer_start_range_ns+0x1a6/0x4d0
Oct 28 22:26:22 localhost kernel: [<f8c13050>] ? drm_ioctl+0x0/0x470 [drm]
Oct 28 22:26:22 localhost kernel: [<c110bdca>] do_vfs_ioctl+0x7a/0x590
Oct 28 22:26:22 localhost kernel: [<c10fd56d>] ? rw_verify_area+0x5d/0xd0
Oct 28 22:26:22 localhost kernel: [<c1048ac4>] ? do_setitimer+0x154/0x200
Oct 28 22:26:22 localhost kernel: [<c10fdaa6>] ? vfs_read+0x136/0x160
Oct 28 22:26:22 localhost kernel: [<c110c33f>] sys_ioctl+0x5f/0x80
Oct 28 22:26:22 localhost kernel: [<c100379f>] sysenter_do_call+0x12/0x28


Steps to reproduce:

Open firefox, go to google, go to images, slearch for something, use mouse middle scroller for scroll.

bug seen on ARCH kernel 2.6.36 2.6.35 2.6.34 and Zen
on 2.6.33.7-rt bug not work